We assess
The current state across email, user access, backup, remote access, critical applications, ERP and external IT providers.
Cyber Risk & Resilience Review
How ready is your organization for a serious digital disruption?
We help management understand key cyber risks, business impact and the first actions required to improve operational resilience.
Independent advisory review
No hardware sales
No replacement of your IT provider
The problem
Cybersecurity is not only an IT issue.
Today, almost every organization depends on email, ERP, files, cloud services, remote access, IT providers and critical data.
If one of these stops working, the problem is not merely technical. Invoicing may stop, orders may be delayed, production may be interrupted, or management may not know who should do what.
The real question is not whether there is antivirus or backup. The real question is whether management has a clear view of the key risks and first actions required.
The service
Cyber Risk & Resilience Review
Initial cyber risk and business resilience assessment
We prioritize
We connect findings with business impact and identify which actions should come first.
We guide
We deliver a practical 30/90-day action plan and present the findings to management.
Self-check
10 questions worth answering
01
Which systems are absolutely critical for daily operations?
02
What happens if email, ERP or key files are unavailable for 1–2 days?
03
Has backup restore been tested recently, or do we simply assume that backup exists?
04
Which users and external partners have access to critical data?
05
Is MFA / two-factor authentication enabled for email, cloud and critical applications?
06
Is there a clear process when an employee leaves or changes role?
07
Who has remote access and how is this access controlled?
08
Is it clear which provider is responsible for each critical system?
09
Is there a response plan for ransomware, email compromise or data loss?
10
Does management have a recent written view of risks and priorities?
What we provide
- Independent advisory assessment
- Clear management-level risk picture
- Practical recommendations and action plan
- Implementation oversight, if required
- Periodic advisory support under annual contract
What we do not do
- We do not sell equipment or firewalls
- We do not install or configure systems
- We do not replace the organization’s IT provider
- We do not provide 24/7 SOC/MDR in the initial package
- We do not promise complete security
Initial review packages
Clear pricing, clear scope
Prices apply to organizations within Attica and do not include VAT.
Basic
€1,500
For small businesses with simple information systems.
Standard
€2,200
For most commercial, technical and small production companies.
Plus
€3,000
For organizations with more systems, users or complexity.
Advanced
from €10,000
For larger or more complex organizations with multiple users, departments or sites.
Enterprise
from €50,000
For large-scale organizations, chains, public sector bodies or multi-site operations.
For organizations outside Attica, fixed travel and stay charges apply when physical presence is required.
Large engagements
Advanced & Enterprise Engagements
For municipalities, public sector bodies, chains, industrial companies, factories, organizations with many operating points or increased complexity.
Advanced — from €10,000 + VAT
For organizations with increased complexity, indicatively 100–500 users, 2–10 sites, multiple departments, critical systems or a need for more detailed management reporting.
- Advanced Scoping Session: €1,500 + VAT
- Parameterized final proposal
- Deeper report and executive presentation
Enterprise — from €50,000 + VAT
For large organizations with extended geographic dispersion, many points of sale, 1,000+ employees, complex information systems or multi-phase assessment needs.
- Enterprise Scoping Workshop: €3,000 + VAT
- Sample-based review of locations / sites
- Board-level summary and multi-phase roadmap
How the final price is calculated
The final proposal is prepared after scoping, based on the number of sites, users, critical systems, workshops, business units, required reports, physical presence and management presentations.
No Advanced or Enterprise engagement is priced without prior scoping.
Process
From first discussion to action plan
1
Qualification
A short initial discussion to confirm whether the service fits the organization.
2
Proposal
Proposal with scope, pricing, deliverables and service limits.
3
Assessment
Interviews, information collection and review of key areas.
4
Report
Written report with findings, priorities and 30/90-day action plan.
5
Presentation
Management presentation and 30-day follow-up.
Service path
From initial review to continuous improvement
1. Review
Initial assessment, report and action plan.
2. Oversight
Implementation oversight of recommended actions by the organization or its IT provider.
3. Advisory Support
Annual periodic advisory support, only after a completed Review.
FAQ
Before we start
No. It is an initial advisory assessment of cyber risk and resilience. Penetration testing or vulnerability assessment may be proposed as a separate specialist service.
No. We do not sell or install equipment in the initial model. We provide assessment, guidance and progress oversight.
Yes, ideally. Their participation helps build an accurate picture of the current environment and avoids misunderstandings.
Yes. Cyber Resilience Advisory Support is provided under an annual term with monthly payment option, only after a completed Review.
Yes. For municipalities, public sector bodies, chains, industrial companies or multi-site organizations, Advanced and Enterprise engagements are available from €10,000 and €50,000 + VAT respectively, only after scoping.
Contact
Request an initial discussion
Send us the basic details of your organization and we will contact you for a short first discussion.
VALKANIKI LTD